CVE-2025-20183
Estado: AnalizadaMedia (5.3)—
The vulnerability is due to improper handling of a crafted range request header. An attacker could exploit this vulnerability by sending an HTTP request with a crafted range request header through the affected device. A successful exploit could allow the attacker to evade the antivirus scanner and download malware onto the endpoint without detection by Cisco Secure Web Appliance.
Detalles técnicos trazas, registros y código del informe original
A vulnerability in a policy-based Cisco Application Visibility and Control (AVC) implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to evade the antivirus scanner and download a malicious file onto an endpoint.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- Puntuación base: 5.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.44%
- Percentil entre todas las CVEs puntuadas: 36
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-20
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2025-20183",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2025-20183",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2025-02-05T17:00:32.365680Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 5.8,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 1.4,
"exploitabilityScore": 3.9
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 1.4,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco Secure Web Appliance",
"versions": [
{
"status": "affected",
"version": "11.8.0-453"
},
{
"status": "affected",
"version": "12.5.3-002"
},
{
"status": "affected",
"version": "12.0.3-007"
},
{
"status": "affected",
"version": "12.0.3-005"
},
{
"status": "affected",
"version": "14.1.0-032"
},
{
"status": "affected",
"version": "14.1.0-047"
},
{
"status": "affected",
"version": "14.1.0-041"
},
{
"status": "affected",
"version": "12.0.4-002"
},
{
"status": "affected",
"version": "14.0.2-012"
},
{
"status": "affected",
"version": "11.8.0-414"
},
{
"status": "affected",
"version": "12.0.1-268"
},
{
"status": "affected",
"version": "11.8.1-023"
},
{
"status": "affected",
"version": "11.8.3-021"
},
{
"status": "affected",
"version": "11.8.3-018"
},
{
"status": "affected",
"version": "12.5.1-011"
},
{
"status": "affected",
"version": "11.8.4-004"
},
{
"status": "affected",
"version": "12.5.2-007"
},
{
"status": "affected",
"version": "12.5.2-011"
},
{
"status": "affected",
"version": "14.5.0-498"
},
{
"status": "affected",
"version": "12.5.4-005"
},
{
"status": "affected",
"version": "12.5.4-011"
},
{
"status": "affected",
"version": "12.0.5-011"
},
{
"status": "affected",
"version": "14.0.3-014"
},
{
"status": "affected",
"version": "12.5.5-004"
},
{
"status": "affected",
"version": "12.5.5-005"
},
{
"status": "affected",
"version": "12.5.5-008"
},
{
"status": "affected",
"version": "14.0.4-005"
},
{
"status": "affected",
"version": "14.5.1-008"
},
{
"status": "affected",
"version": "14.5.1-016"
},
{
"status": "affected",
"version": "15.0.0-355"
},
{
"status": "affected",
"version": "15.0.0-322"
},
{
"status": "affected",
"version": "12.5.6-008"
},
{
"status": "affected",
"version": "15.1.0-287"
},
{
"status": "affected",
"version": "14.5.2-011"
},
{
"status": "affected",
"version": "15.2.0-116"
},
{
"status": "affected",
"version": "14.0.5-007"
},
{
"status": "affected",
"version": "15.2.0-164"
},
{
"status": "affected",
"version": "14.5.1-510"
},
{
"status": "affected",
"version": "12.0.2-012"
},
{
"status": "affected",
"version": "12.0.2-004"
},
{
"status": "affected",
"version": "14.5.1-607"
},
{
"status": "affected",
"version": "14.5.3-033"
},
{
"status": "affected",
"version": "14.5.0-673"
},
{
"status": "affected",
"version": "14.5.0-537"
},
{
"status": "affected",
"version": "12.0.1-334"
},
{
"status": "affected",
"version": "14.0.1-503"
},
{
"status": "affected",
"version": "14.0.1-053"
},
{
"status": "affected",
"version": "11.8.0-429"
},
{
"status": "affected",
"version": "14.0.1-040"
},
{
"status": "affected",
"version": "14.0.1-014"
},
{
"status": "affected",
"version": "12.5.1-043"
}
],
"defaultStatus": "unknown"
}
]
}
],
"published": "2025-02-05T17:15:25.527",
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-swa-range-bypass-2BsEHYSu",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in a policy-based Cisco Application Visibility and Control (AVC) implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to evade the antivirus scanner and download a malicious file onto an endpoint. \r\n\r\nThe vulnerability is due to improper handling of a crafted range request header. An attacker could exploit this vulnerability by sending an HTTP request with a crafted range request header through the affected device. A successful exploit could allow the attacker to evade the antivirus scanner and download malware onto the endpoint without detection by Cisco Secure Web Appliance."
},
{
"lang": "es",
"value": "Una vulnerabilidad en una implementación basada en políticas de Cisco Application Visibility and Control (AVC) de Cisco AsyncOS Software para Cisco Secure Web Appliance podría permitir que un atacante remoto no autenticado eluda el escáner antivirus y descargue un archivo malicioso en un endpoint. La vulnerabilidad se debe a una gestión inadecuada de un encabezado de solicitud de rango manipulado. Un atacante podría explotar esta vulnerabilidad enviando una solicitud HTTP con un encabezado de solicitud de rango manipulado a través del dispositivo afectado. Una explotación exitosa podría permitir que el atacante eluda el escáner antivirus y descargue malware en el endpoint sin que Cisco Secure Web Appliance lo detecte."
}
],
"lastModified": "2026-06-17T08:41:00.330",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:asyncos:11.8.0-414:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DDF27FDC-ADC4-4C98-8A49-DAD2471F8301"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:11.8.0-429:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1C5CF4F-FB9C-4497-8D4F-ACF0B5619B26"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:11.8.0-453:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F1D538A-A548-43B2-91A6-104E7E048D6F"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:11.8.1-023:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02072E0E-BC8C-4992-AB4D-BDE5829169A3"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:11.8.3-018:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67213820-8CF2-4C0E-8BE8-801FD01A97C3"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:11.8.3-021:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2281D49F-6C3F-4B09-AFB4-707253876591"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:11.8.4-004:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "01D81165-118F-49C9-8F81-282ECC09A31B"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:12.0.1-268:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F6D5632-1951-4DB7-9B56-4D1947E09ECD"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:12.0.1-334:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D00FA43A-4E47-401E-A3EB-5DD1DD01D731"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:12.0.2-004:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E8D5C72-C85D-4D5F-8290-2158737A8AF5"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:12.0.2-012:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A30D4E9-7199-4841-8FB3-61123E155B6C"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:12.0.3-005:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86F3D9B3-B5FB-4F8A-929E-B6EFD731739F"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:12.0.3-007:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F221598-29D1-4B13-A427-315F93BD9865"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:12.0.4-002:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D061F30A-E46B-4771-9E9A-45C198A31140"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:12.0.5-011:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B982C95-2AA6-466A-9D29-A9BECFD97502"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:12.5.1-011:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2D22A3C-16D5-4F61-AB44-111F4A4D9F5C"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:12.5.1-043:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6206A35-E1A4-4B6D-9C9F-16F06C6148BE"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:12.5.2-007:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8C79D794-0BA9-4A55-B843-FBF9B7374095"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:12.5.2-011:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2536DCE8-4F1D-4056-A021-409B54C86ED9"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:12.5.3-002:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D75C030-216E-4019-ABA5-6DB662C6755C"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:12.5.4-005:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BBE6E431-7859-4E92-88C5-C85DADC8A5D7"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:12.5.4-011:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2FC0B862-5248-42D1-BB20-F957DD98A585"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:12.5.5-004:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "495A2286-32A3-4F86-9D14-A1561FCE418A"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:12.5.5-005:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "654F0E3A-EEE2-4111-8E80-6C4B78EA5CBF"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:12.5.5-008:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D77BA3B2-D2B5-4A62-BE5C-F5A38736D285"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:12.5.6-008:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09EA2D4E-2E11-40E9-ABA0-7643B6A78857"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:14.0.1-014:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "14B69F30-9430-4FA0-8BED-515C26D36788"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:14.0.1-040:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B69B7B51-55D4-4346-84BC-5B8226251BC8"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:14.0.1-053:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF47A58B-9D1D-44C2-95DD-5413B8F8A6CF"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:14.0.1-503:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D024F9E1-004C-4639-A057-B2F4238CA3B7"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:14.0.2-012:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "50BAC418-1CA1-4DB7-8B54-E4754A35F6E8"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:14.0.3-014:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A3A1AE33-A44E-422C-BBF3-FEF0BD24081D"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:14.0.4-005:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5A91305-1002-4717-AB81-A98C9C30CEA5"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:14.0.5-007:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07433741-D7ED-4742-B449-64D23E002E75"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:14.1.0-032:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A1C5EDF4-868A-43B9-B5BA-0F62984F7BE5"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:14.1.0-041:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "45B7B8BB-91DA-490B-BA54-27AD44F862A4"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:14.1.0-047:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16B7F282-1F20-4C84-A13E-C671BAE3F8D0"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:14.5.0-498:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "60A56580-C34C-4E5D-B053-9D02F8DD9681"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:14.5.0-537:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "567CFC71-7AE1-456D-B87F-FDA4CDFA0936"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:14.5.0-673:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "03F9301C-A93C-4D12-9C4B-E4D984D136D6"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:14.5.1-008:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89DC9472-A8C0-41CB-99DE-B0E160157B3C"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:14.5.1-016:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78109D4E-9FAA-4B5A-96E4-6D30D3458BFD"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:14.5.1-510:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F615EBAA-EF52-4431-8080-2CF34269BE28"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:14.5.1-607:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1FE4CBC9-5786-4896-9FF7-C22E02FC9428"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:14.5.2-011:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "134FF12A-15FB-4D3D-BA99-479C8EEE534B"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:14.5.3-033:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E3219303-FBC6-43FD-A712-63DACA8A6D43"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:15.0.0-322:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0FD96D2A-EE17-4AF6-B8DD-E25F4DCB9313"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:15.0.0-355:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CCD55688-9581-4363-B8A0-2CC4080EA720"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:15.1.0-287:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E1595FF1-D7A9-402C-B8D0-C2ED6E195637"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:15.2.0-116:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9D0F8BE7-992B-455B-8D64-4B0A79B53131"
},
{
"criteria": "cpe:2.3:o:cisco:asyncos:15.2.0-164:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28BDB938-CB66-457E-BEE6-B115A1E990B6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:secure_web_appliance_virtual_s1000v:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "09BCBB0F-88F1-4469-A7D4-DA8BCAF5470A"
},
{
"criteria": "cpe:2.3:a:cisco:secure_web_appliance_virtual_s100v:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2F88A369-E3A2-431A-AB71-CCD4F15E68EB"
},
{
"criteria": "cpe:2.3:a:cisco:secure_web_appliance_virtual_s300v:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FE8ED2A4-8E08-420D-B377-6D1F5AF675DC"
},
{
"criteria": "cpe:2.3:a:cisco:secure_web_appliance_virtual_s600v:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "780EA177-5623-4AFF-9316-D557BE2BD47D"
},
{
"criteria": "cpe:2.3:h:cisco:secure_web_appliance_s196:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FE1F2FAF-C64B-4AEB-8DE4-329C61B8D17F"
},
{
"criteria": "cpe:2.3:h:cisco:secure_web_appliance_s396:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B5596058-16DB-46C0-82AC-D9BFC13F4126"
},
{
"criteria": "cpe:2.3:h:cisco:secure_web_appliance_s696:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "62BEA59D-2AF1-4BDF-ACB3-450BED2E5AAB"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@cisco.com"
}